OC-ADM-POD-NETWORK-ISOLATE-PROJECTS(1)

📦
version 4.22.0 · 2 versions
, in nixpkgs unstable

💅 OC ADM POD-NETWORK-ISOLATE-PROJECTS(1) ✨

okay bestie, so this is a page from the Openshift CLI User Manuals (the OC ADM POD-NETWORK family, June 2016 era 🫶) and it's literally all about walling off your project's network so nobody else can just waltz in. let's get into it 💖

🌸 NAME 🌸

oc adm pod-network isolate-projects — isolate that project network, periodt 🔒

⭐ SYNOPSIS ⭐

oc adm pod-network isolate-projects [OPTIONS]

🦋 DESCRIPTION 🦋

Isolate project network. that's the whole vibe ✨

It lets projects isolate their network from other projects — but only when you're using the redhat/openshift-ovs-multitenant network plugin. no cap, that's the one that matters here 👑

🎀 OPTIONS 🎀

  • --selector="" — a label selector to filter projects. so like, either you pass one or more projects as arguments, or you use this project selector. pick a lane bestie, you don't need both 💅

👑 OPTIONS INHERITED FROM PARENT COMMANDS 👑

these are the hand-me-downs from the parent command, and honestly? they ate. every single one, in order 💜

  • --as="" — username to impersonate for the operation. could be a regular user or a service account in a namespace.
  • --as-group=[] — group to impersonate for the operation. this flag can be repeated to specify multiple groups.
  • --as-uid="" — UID to impersonate for the operation.
  • --as-user-extra=[] — user extras to impersonate for the operation. this flag can be repeated to specify multiple values for the same key.
  • --cache-dir="/homeless-shelter/.kube/cache" — default cache directory.
  • --certificate-authority="" — path to a cert file for the certificate authority.
  • --client-certificate="" — path to a client certificate file for TLS.
  • --client-key="" — path to a client key file for TLS.
  • --cluster="" — the name of the kubeconfig cluster to use.
  • --context="" — the name of the kubeconfig context to use.
  • --disable-compression=false — if true, opt-out of response compression for all requests to the server.
  • --insecure-skip-tls-verify=false — if true, the server's certificate will not be checked for validity. ⚠️ this will make your HTTPS connections insecure — bestie please be careful with this one 😭
  • --kubeconfig="" — path to the kubeconfig file to use for CLI requests.
  • --kuberc="" — path to the kuberc file to use for preferences. this can be disabled by exporting the KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off.
  • --match-server-version=false — require server version to match client version.
  • -n, --namespace="" — if present, the namespace scope for this CLI request.
  • --profile="none" — name of profile to capture. one of (none|cpu|heap|goroutine|threadcreate|block|mutex) 🧚
  • --profile-output="profile.pprof" — name of the file to write the profile to.
  • --request-timeout="0" — the length of time to wait before giving up on a single server request. non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). a value of zero means don't timeout requests. she waits forever, iconic 💀
  • -s, --server="" — the address and port of the Kubernetes API server.
  • --tls-server-name="" — server name to use for server certificate validation. if it is not provided, the hostname used to contact the server is used.
  • --token="" — bearer token for authentication to the API server.
  • --user="" — the name of the kubeconfig user to use.
  • --warnings-as-errors=false — treat warnings received from the server as errors and exit with a non-zero exit code. strict queen behavior 🙈

🔥 EXAMPLE 🔥

# Provide isolation for project p1
oc adm pod-network isolate-projects <p1>

# Allow all projects with label name=top-secret to have their own isolated project network
oc adm pod-network isolate-projects --selector='name=top-secret'

see how clean that is? first one isolates p1 directly, second one grabs everything with the label name=top-secret. both slay 💖

🌈 SEE ALSO 🌈

go read the parent page too, iykyk 👑

🍓 HISTORY 🍓

June 2016, Ported from the Kubernetes man-doc generator. a whole throwback, fr fr ⭐

and that's the whole thing bestie 💅 Openshift — Openshift CLI User Manuals, from way back in June 2016. go isolate those projects, you've got this 🫶✨

📦 where this page comes from